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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 
A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1.1 7(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.114. Applicant's submission filed on 10 October 2007 has been entered. 

Response to Amendment 
Claims 1-24 are pending. Claims 1-13 and 15-17 are amended. Claims 25-33 are 
canceled. 

Drawings 

The drawings are objected to under 37 CFR 1 .83(a). The drawings must show every 
feature of the invention specified in the claims. Therefore, the methods of claims 1-16 and 17-24 
must be shown or the feature(s) canceled from the claim(s). No new matter should be entered. 

Corrected drawing sheets in compliance with 37 CFR 1.121(d) are required in reply to 
the Office action to avoid abandonment of the application. Any amended replacement drawing 
sheet should include all of the figures appearing on the immediate prior version of the sheet, 
even if only one figure is being amended. The figure or figure number of an amended drawing 
should not be labeled as "amended." If a drawing figure is to be canceled, the appropriate figure 
must be removed from the replacement sheet, and where necessary, the remaining figures must 
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be renumbered and appropriate changes made to the brief description of the several views of the 
drawings for consistency. Additional replacement sheets may be necessary to show the 
renumbering of the remaining figures. Each drawing sheet submitted after the filing date of an 
application must be labeled in the top margin as either "Replacement Sheet" or "New Sheet" 
pursuant to 37 CFR 1.121(d). If the changes are not accepted by the examiner, the applicant will 
be notified and informed of any required corrective action in the next Office action. The 
objection to the drawings will not be held in abeyance. 

Claim Objections 

Claim 1 is incomplete for omitting an essential step, such omission amounting to a gap 
between the steps. See MPEP § 2172.01. Specifically, the method does not define the tailored 
object class definition before redefining it in the third step. The specification may disclose the 
missing steps, but those steps are not read into the claim limitations. 

Claim Rejections - 35 USC § 101 

35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of matter, or any new and useful 
improvement thereof, may obtain a patent therefor, subject to the conditions and requirements of this title. 

Claims 1-24 are rejected under 35 U.S.C. 101 because the claimed invention is directed 
to non-statutory subject matter. 

The disclosed subject matter lacks a practical application of a judicial exception (law of 
nature, abstract idea, naturally occurring article/phenomena) since it fails to produce a useful, 
concrete, and tangible result. 
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As per claims 1-16, the disclosed subject matter does not produce a tangible result 
because it fails to produce a result that is limited to having real world value rather than a result 
that may be interpreted to be abstract in nature as, for example, a thought, a computation, or 
manipulation of data. Specifically, the disclosed subject matter provides for making the 
association between the identifiers and fields available for data processing activities. This result 
is not defined in the specification, thus it is unknown if making these associations "available" 
requires the tangible result of sending them to another system or presenting them to a user. The 
result remains in the abstract and, thus, fails to achieve the required status of having real world 
value. 

Further, as per claims 1-14, according to the instant specification (see the paragraph 
beginning on pg. 17, line 27), the computer program product includes carrier waves. As such, 
the instant claims are non-statutory. 

As per claims 17-24, the disclosed subject matter does not produce a tangible result 
because it fails to produce a result that is limited to having real world value rather than a result 
that may be interpreted to be abstract in nature as, for example, a thought, a computation, or 
manipulation of data. Specifically, the disclosed subject matter provides for changing a field 
status. This result does not appear to require a tangible result such as sending the changes to 
another system or presenting them to a user. The result remains in the abstract and, thus, fails to 
achieve the required status of having real world value. 

As per claims 17-24, the instant claims are directed to software per se. Independent 
claim 17 recites a computer program per se and functional descriptive material consisting of data 
structures and computer programs, which impart functionality when employed as a computer 



Application/Control Number: Page 5 

10/674,327 

Art Unit: 2168 

component. As such, the instant claims are not limited to statutory subject matter and are 
therefore non-statutory. See Diehr, 450 U.S. at 185-86, 209 USPQ at 8. 

Claim Rejections - 35 USC §103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 1-9 and 11-16 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Hansen et al., U.S. 6,886,016 (Hansen), in view of Olds, U.S. 5,878,415 (Olds). 

1 . A computer program product, tangibly embodied in one ore more information carriers, 
for tailoring the storage of information, the computer program product comprising instructions 
operable to cause one or more data processing apparatuses to (See e.g. Hansen- Fig. 3): 

present a user with options for tailoring an object class definition (See e.g. Hansen Figs. 
2, 2A } and col. 3, line 57 - col 4, line 5, "Next, in step 106, the user [selects] a plurality of 
attributes associated with the index class. As shown in FIG. 2A } the user can select from a list of 
available or existing attributes (key fields) 1 70")', 

receive user input for tailoring the object class definition in response to the presentation 
of options, the user input identifying (See e.g. Hansen Fig. 2 A and col. 3, line 57 -col. 4, line 5 } 
"Thus, in FIG. 2 A, the user has defined the index class Patient'') 
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a first field to be included in the tailored object class definition (See e.g. Hansen 
Fig. 2 A and col. 3, line 57 -col. 4, line 5, "Thus, in FIG. 2 A, the user has defined the 
index class Patient, and assigned or created the following attributes 180: Last Name, 
First Name, Social Security Number, Date Admitted (Date 1), and Doctor" where the 
claimed ( first field" is one of the referenced "attributes"), 

a second field to be included in the tailored object class definition (See e.g. 
Hansen Fig. 2 A and col. 3, line 57 - col. 4, line 5, "Thus, in FIG. 2 A, the user has 
defined the index class Patient, and assigned or created the following attributes 180: Last 
Name, First Name, Social Security Number, Date Admitted (Date 1), and Doctor" where 
the claimed "second field" is one of the referenced "attributes"), 

a first user or group of users (Hansen Fig. 2A shows that a user has selected the 
"ACLPUBLIC" Access List, which is the claimed "first... group of users"), and 

a second user or group of users (Hansen Fig. 2 A shows that a user has selected 
the "USJLNGLISH" Language, which is the claimed "second... group of users" )\ 
redefine the tailored object class definition to include the first field and the second field 
(See e.g. Hansen Fig. 2 and col. 4, lines 18-30, "After the user has completed the process of 
defining the index class, the information is transmitted to the library server 30, via step 110"); 

associate a first identifier with the first field to identify that the first user or group of users 
is to be excluded from a first activity that involves the first field (Hansen implicitly teaches 
excluding groups of users from activities involving identified fields in at least Figs. 2, 2 A, and 
col. 3, line 41 - col. 4, line 41. Olds, however, explicitly teaches the limitation, see Figs. 2, 5, 
col. 7, lines 27-35, "During a setting step 44, an access control property of the ancestor object is 
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initially created and initialized, " and col. 8, lines 35-46, "A trustee/mask field 86 contains a 
value identifying a trustee if the property 84 indicates in a property type field 88 that the 
property 84 grants 'object rights ' or 'all properties rights ' or a specific property access right. " 
Thus, it would have been obvious to one of ordinary skill in the database art at the time of the 
invention to combine the teachings of the cited references because Olds ' teachings would have 
allowed Hansen 's method to gain a common means for controlling access to information, see 
Olds col 3, lines 21-27); and 

associate a second identifier with the second field to identify that the second user or 
group of users is to be excluded from a second activity that involves the second field (Hansen 
implicitly teaches excluding groups of users from activities involving identified fields in at least 
Figs. 2, 2A, and col. 3, line 41 - col. 4, line 41. Olds, however, explicitly teaches the limitation, 
see Figs. 2, 5, col. 7, lines 27-35, "During a setting step 44, an access control property of the 
ancestor object is initially created and initialized, " and col. 8, lines 35-46, "A trustee/mask field 
86 contains a value identifying a trustee if the property 84 indicates in a property type field 88 
that the property 84 grants 'object rights ' or 'all properties rights 1 or a specific property access 
right. " Thus, it would have been obvious to one of ordinary skill in the database art at the time 
of the invention to combine the teachings of the cited references because Olds ' teachings would 
have allowed Hansen 's method to gain a common means for controlling access to information, 
see Olds col. 3, lines 21-27); and 

make the association of the first identifier with the first field and the association of the 
second identifier with the second field available for data processing activities (See e.g. Hansen 
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Fig. 2 and col. 4, lines 18-30, "After the user has completed the process of defining the index 
class, the information is transmitted to the library server 30, via step 110"). 

2. The computer program product of claim 1 5 wherein the instructions also cause the one 
or more data processing apparatuses to exclude the first user or group of users from the first 
activity (See e.g. Olds Fig. 3 and col. 7, line 66 - col. 8, line 6, "The propagator 68 may include 
conventional hierarchical database access means, such as conventional directory services or 
NDS software, which has been extended according to the present invention to propagate 
previously unavailable inheritable access constraints such as object class filters and/or specific 
property access controls"). 

3. The computer program product of claim 1, wherein the instructions cause the one or 
more data processing apparatuses to receive user input identifying a role that the first user or 
group of users plays in an operation (See e.g. Olds Figs. 2, 5, col. 7, lines 27-35, "During a 
setting step 44, an access control property of the ancestor object is initially created and 
initialized, " and col 8, lines 35-46, "A trustee/mask field 86 contains a value identifying a 
trustee"). 

4. The computer program product of claim 3, wherein the instructions cause the one or 
more data processing apparatuses to associate an identifier of the role with the first field (See e.g. 
Olds Fig. 5 and col 8, lines 35-46, "A trustee/mask field 86 contains a value identifying a 
trustee"). 

5. The computer program product of claim 1, wherein the instructions cause the one or 
more data processing apparatuses to receive user input identifying a fieldgroup that includes the 
first field (See e.g. Hansen Fig. 2 and col 3, line 57 - col 4, line 5, "Thus, in FIG. 2 A, the user 
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has defined (he index class Patient, and assigned or created the following attributes 180: Last 
Name, First Name, Social Security Number, Date Admitted (Date 1), and Doctor"). 

6. The computer program product of claim 1, wherein the instructions cause the one or 
more data processing apparatuses to: 

receive first user input identifying the first field and the second field from a first 
individual (See e.g. Hansen Fig. 2 and col. 3, line 57 -col. 4, line 5, "Thus, in FIG. 2A, the user 
has defined the index class Patient, and assigned or created the following attributes 180: Last 
Name, First Name, Social Security Number, Date Admitted (Date 1), and Doctor")] and 

receive second user input identifying the first user or group of users and the second user 
or group of users from a second individual (See e.g. Hansen Fig. 2 and col. 3, line 57 -col. 4, 
line 5, (< If an attribute is not listed, the user can add a new attribute to the list 170 by exiting the 
application (after saving or canceling the session) and modifying the list of available attributes 
170 directly"). 

1. The computer program product of claim 1, wherein the instructions also cause the one 
or more data processing apparatuses to receive user input identifying the first activity from which 
the first user or group of users is excluded (Hansen Fig. 2A shows that a user has selected the 
"US__ENGL1SH" Language, which is the claimed 'first... group of users" and would exclude 
other users who do not speak English). 

8. The computer program product of claim 7, wherein the instructions cause the one or 
more data processing apparatuses to receive user input identifying an authorization level 
identifying the first activity (Hansen Fig. 2 A shows that a user has selected the "ACLPUBLIC" 
Access List, which is the claimed "authorization level" for "first... group of users"). 
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9. The computer program product of claim 8 5 wherein the instructions cause the one or 
more data processing apparatuses to receive user input selecting the authorization level from a 
group of at least four authorization levels (Hansen Fig. 2A shows that a user has selected the 
"ACLPUBL1C" Access List, which is the claimed "authorization level"). 

1 1 . The computer program product of claim 1, wherein the instructions also cause the one 
or more data processing apparatuses to:- 

receive user input identifying an operation performed with the tailored object (See e.g. 
Hansen Fig. 5 and col 7, lines 15-32, "The query could be in the form of "Find all information 
regarding patients where Wong is a doctor")] and 

associate an operation identifier, the first identifier, and the first field to indicate that the 
first user or group of users is to be excluded from the first activity that involves the first field in 
the operation (See e.g. Olds Figs. 2, 5, col. 7, lines 27-35, "During a setting step 44, an access 
control property of the ancestor object is initially created and initialized, " and col. 8, lines 35- 
46, "A trustee/mask field 86 contains a value identifying a trustee if the property 84 indicates in 
a property type field 88 that the property 84 grants 'object rights ' or ( all properties rights ' or a 
specific property access right"). 

12. The computer program product of claim 11, wherein the instructions cause the one or 
more data processing apparatuses to receive user input identifying a collaboration of at least two 
parties (See e.g. Hansen Fig. 5 and col. 7, lines 15-32, "The query could be in the form of "Find 
all information regarding patients where Wong is a doctor"). 

13. The computer program product of claim 1, wherein the instructions also cause the one 
or more data processing apparatuses to instantiate the tailored object class definition (See e.g. 
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Hansen Fig. 2 and col. 3, lines 41-56, "FIG. 2 is a flow diagram illustrating a process 100 by 
which the user creates an index class and defines its attributes according to a preferred 
embodiment of the present invention"). 

14. The computer program product of claim 1, wherein: 

the first activity comprises display of contents of the first field (See e.g. Olds col. 3, lines 
15-20, "Each access control property has three parts... The second part identifies a property 
type, thereby indicating the property or propert ies for which those access rights are given. 
Property types include 'object rights, ' 'all properties rights, 1 and specific properties"); and 

the second activity comprises display of contents of the second field (See e.g. Olds col. 3, 
lines 15-20, "Each access control property has three parts... The second part identifies a 
property type, thereby indicating the property or properties for which those access rights are 
given. Property types include 'object rights, ' 'all properties rights, ' and specific properties"). 

15. The computer program product of claim 1, wherein the instructions cause the one or 
more data processing apparatuses to create a graphical user interface to lead a user through the 
tailoring (See e.g. Hansen Fig. 2A). 

16. The computer program product of claim 15, wherein the instructions cause the one or 
more data processing apparatuses to create the graphical user interface on a web browser (See 
e.g. Hansen Fig. 2 and col. 3, lines 41-56, "FIG. 2 is a flow diagram illustrating a process 100 
by which the user creates an index class and defines its attributes according to a preferred 
embodiment of the present invention "). 
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Claim 10 is rejected under 35 U.S.C. 103(a) as being unpatentable over Hansen et al. 5 
U.S. 6,886,016 (Hansen) and Olds, U.S. 5,878,415 (Olds), in view of Keinsley et al., U.S. 
2003/0154403 (Keinsley). 

10. The computer program product of claim 1, wherein the instructions also cause the one 
or more data processing apparatuses to: 

identify a trigger (See e.g. Hansen Fig. 2 A, where the claimed "trigger" is the referenced 
changing the Access List from "ACLPUBL1C" to another option in the drop down menu); and 

based upon the identification of the trigger, end the association of the first identifier with 
the first field to indicate that the first user or group of users is no longer excluded from the first 
activity (Hansen and Olds do not teach ending the association between an identifier and a field 
based on a trigger. However, Keinsley does, see [0561 ], "Reinstate a User is equivalent to 
Register a User, where an existing user account is being used, where the user has been 
previously registered with the entity, and the status is Revoked. This results in reregistered and 
active status records being set up for the entity-user. " Thus, it would have been obvious to one 
of ordinary skill in the database art at the time of the invention to combine the teachings of the 
cited references because Keinsley 's teachings would have allowed Hansen and Olds 9 method to 
gain the ability to reinstate a user after a suspension, see [0561]). 

Claims 17-24 are rejected under 35 U.S.C. 103(a) as being unpatentable over Hansen et 
al., U.S. 6,886,016 (Hansen), in view of Keinsley et al., U.S. 2003/0154403 (Keinsley). 
17. A system comprising (See e.g. Hansen Fig. 1): 
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a data storage device including tailored data object class definitions (See e.g. Hansen Fig. 
3 and col 5, lines 30-33, "The Index Class Definition Table 214 (Table 2) lists all index classes 
and their respective identification numbers"), the tailored data class definitions having user- 
defined data fields (See e.g. Hansen Fig. 2 and col. 3, line 57 -col. 4, line 5, "Thus, in FIG. 2A } 
the user has defined the index class Patient, and assigned or created the following attributes 
180: Last Name, First Name, Social Security Number, Date Admitted (Date 1), and Doctor" )\ 
and 

a data processing device in data communication with the data storage device, the data 
processing device being configured to perform data processing activities in accordance with a set 
of machine-readable instructions (See e.g. Hansen Fig. 6 and col. 7, lines 15-32, "The Request 
Processor 322 takes the query 302 and processes it in step 520"), the activities including: 

identifying a trigger (See e.g. Hansen Fig. 2 A, where the claimed "trigger" is the 
referenced changing the Access List from "ACLPUBLIC" to another option in the drop 
down menu); and 

changing a status of a field in a first instance of a tailored object based on 
identification of the trigger (Hansen implicitly teaches changing a field's status, i.e. the 
status of the referenced "attributes" would change if another "Access List" option were 
chosen. Keinsley, however, explicitly teaches changing the status based on a trigger, see 
Fig. 15B where, when the referenced "Status" is changed to "Inactive, " the user is 
temporarily suspended, see e.g. [0570], "An access administrator for an entity or the IT 
security personnel of the sponsor organization can temporarily suspend a user for the 
entity. " The claimed "field" is the referenced "Name " in Fig. 15 A. Thus, it would have 



Application/Control Number: Page 14 

10/674,327 

Art Unit: 2168 

been obvious to one of ordinary skill in the database art at the time of the invention to 
combine the teachings of the cited references because Keinsley 's teachings would have 
allowed Hansen 's system to gain more specif c means for maintaining security, see 
Keinsley [0015]), wherein the status of the field is associated with an activity that 
involves the field and with a participant who is excluded from performing the activity 
involving the field (See e.g. Keinsley Figs. 15A-B, [0004], "Sponsor organizations, such 
as healthcare companies, have clients that access their data and other resources over a 
distributed information retrieval system such as the World Wide Web, " and [0523], 'The 
combination of the statuses controls whether a given user can perform something for a 
given entity against certain data, " where the claimed <( activity }} is the referenced 
"perform something" and the claimed "participant" is the referenced "user"). 

18. The system of claim 17, wherein changing the status of the field includes ending an 
exclusion of the identified participant from involving the field in the activity (See e.g. Keinsley 
[056 J ], "Reinstate a User is equivalent to Register a User, where an existing user account is 
being used, where the user has been previously registered with the entity, and the status is 
Revoked. This results in reregistered and active status records being set up for the entity-user"). 

19. The system of claim 1 8, wherein changing the status of the field includes releasing a 
field for display to all participants (See e.g. Keinsley Fig. 15A where the "Current Status" of all 
users, i.e. "participants" is displayed). 

20. The system of claim 17, further comprising operational instructions for the creation of 
a product (See e.g. Keinsley [0036], "Dynamic Menus— the list of functions a user can perform 
based on the rights granted to him or her within the secured logon application. If a user does not 
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have access to a particular function that function will not be presented as a menu item to the 
user"), 

21 . The system of claim 17, wherein the tailored data object class definitions comprise: 
standard elements hardcoded into the tailored data object class definitions and hence not 

definable by a user (See e.g. Hansen Fig. 2A where elements such as "Name, " "Abbreviation, " 
"Language, " etc. are "hardcoded"); and 

tailored elements including the user-defined data fields (See e.g. Hansen Fig. 2A and col. 
3, line 57 - col. 4, line 5, "Thus, in FIG. 2 A, the user has defined the index class Patient, and 
assigned or created the following attributes 180: Last Name, First Name, Social Security 
Number, Date Admitted (Date I), and Doctor"), 

22. The system of claim 21, wherein the standard elements comprise elements found in 
every member of a group of data object class definitions (See e.g. Hansen Fig, 2 A where 
elements such as "Name, " "Abbreviation, " "Language, " etc. would be in every class), 

23. The system of claim 17, wherein the data processing device activities further include: 
receiving user input identifying an operation that involves the tailored object class 

definition, the operation including the activity that involves the field (See e.g. Keinsley [0004], 
"Sponsor organizations, such as healthcare companies, have clients that access their data and 
other resources over a distributed information retrieval system such as the World Wide Web. 
Such sponsor organizations have need of a stand-alone security system controlling access to 
secured information and self service functionality for the sponsor organization")', and 

associating an identifier of the operation with the status to indicate that the status is 
relevant to the operation (See e.g. Keinsley Fig. 15A and [0009], "5. Different users need to play 
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different roles within the entities for which they work. This requirements means that there needs 
to be a way to assign roles to users "). 

24. The system of claim 23, wherein the data processing device activity of receiving user 
input identifying the operation includes receiving user input identifying a collaboration of at least 
two parties (See e.g. Keinsley Fig. 15A and [0007], u 3. In order to use the system, each user 
needs to have the context in which he uses the system be defined. In general the context is the 
organization for which he or she works. Typically these organizations are different from the 
sponsor organization. Having the context will drive what kinds of business functions and data 
are available to the user n ). 

Response to Arguments 

As per Applicant's argument that the claims are statutory under 35 U.S.C. 101, the 
Examiner respectfully disagrees. As per claims 1-14, deleting material from the specification 
(i.e. "or in a propagated signal") does not overcome the non-statutory signals rejection. Rather, 
Applicant must specifically disavow the use of carrier waves. A simpler alternative would be to 
amend the claims to read u a machine-readable storage device," since that is statutory. 

Claims 17-24 are not statutory under 35 U.S.C. 101 because they are directed to a system 
but do not require hardware. Executing stored instructions on a processor is not a system. 
Rather, there must be physical components, defined as such in the specification, that work 
together to execute the claimed method. In the instant case, for example, there must be a 
physical component that identifies a trigger. 
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Applicant's arguments with respect to the 35 U.S.C. 102(e) rejections of claims 1-16 
have been considered but are moot in view of the new ground(s) of rejection. 

As per Applicant's argument that Keinsley does not teach the limitations of claims 17-24, 
the Examiner is not certain which limitations Applicant is referring to. The Examiner has, 
however, used another reference to teach tailoring data object class definitions. With Hansen as 
the primary reference, Keinsley's teachings add the details about modifying a user's access to a 
given system. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Aaron Sanders whose telephone number is 571-270-1016. The 
examiner can normally be reached on M-F 9:00a-4:00p. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Tim Vo can be reached on 571-272-3642. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/AJS/ 

Aaron J. Sanders 

Examiner 

21 December 2007 
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